Roadmap
Last updated: Oct 26, 2026
This page shows the most important work of Fluid Attacks and the new features that are in progress. These features make security better and workflows easier. They also give you more efficiency and transparency.
AI-powered vulnerability scanner (in progress)
Completed: Fluid Attacks built an AI-powered SAST scanner. It automates vulnerability detection that previously required manual analysis. It identifies SQL injections and XSS with more than 90% precision, at the speed of automation.
Current focus: Fluid Attacks increases the detection accuracy (precision and recall) and increases the CWE coverage to support more vulnerability types (also known as weaknesses).
To see how we are doing on these goals, check the entries marked with "AI-SAST" in our changelog.
Fluid Attacks' peer reviewer assistant (in progress)
Overview: A complementary security approach that gives AI-powered comments on your pull requests. These comments help to prevent new vulnerabilities before you merge the code. This function will be available only in the Advanced plan.
Completed: The Azure DevOps and GitLab integrations for SAST, SCA, and SS techniques are available.
Current focus: Fluid Attacks adds the GitHub integration for SAST, SCA, and SS techniques.
To see how we are doing on these goals, check the entries marked with "Peer Reviewer" in our changelog.
Scope management improvements (in progress)
Completed: Fluid Attacks made the registration workflow of mobile application environments easier to use. Fluid Attacks added table filters for environments and files to make navigation and management easier. Fluid Attacks changed the design of group creation.
Current focus: Fluid Attacks makes the group workflow clearer. The goal is to show that you can register environments to groups.
To see how we are doing on these goals, check the entries marked with "ASPM" in our changelog.
Secret scanner enhancements (in progress)
Current focus: Fluid Attacks makes its secret scanner better. The goal is automatic support for 400 or more different secret types.
Stay tuned to entries marked with "SS" in our changelog to identify our progress on this goal.
Rust language support (in progress)
Current focus: Fluid Attacks adds Rust as a new supported language for vulnerability detection.
Automated API DAST (in progress)
Current focus: Fluid Attacks makes an automated DAST scanner for APIs. This scanner extends the functions of the dynamic analysis.
Stay tuned to entries marked with "DAST API" in our changelog to identify our progress on this goal.
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' pentesting team, complete this contact form.